2.5.1.3 Parentheses and Order of Precedence

msdn link

SDDL expressions MUST be interpreted in the following order of precedence, with operations of equal precedence being evaluated from left to right. In addition, any term or conditional expression within a conditional expression can be enclosed in parentheses. Expressions within parentheses MUST be evaluated first.

  1. Exists, Not_Exists

  2. Member_of, Not_Member_of, Device_Member_of, Not_Device_Member_of, Member_of_Any, Not_Member_of_Any, Device_Member_of_Any, Not_Device_Member_of_Any, Contains, Not_Contains, Any_of, Not_Any_of, ==, !=, <, <=, >, >=

  3. !

  4. &&

  5. ||